CVE-2020-25812
27.09.2020, 21:15
An issue was discovered in MediaWiki 1.34.x before 1.34.4. On Special:Contributions, the NS filter uses unescaped messages as keys in the option key for an HTMLForm specifier. This is vulnerable to a mild XSS if one of those messages is changed to include raw HTML.
| Vendor | Product | Version |
|---|---|---|
| mediawiki | mediawiki | 1.34.0 ≤ 𝑥 < 1.34.4 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References